Static task
static1
Behavioral task
behavioral1
Sample
e32c00297f567cd6af0ee8292a78eb93_virlock_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e32c00297f567cd6af0ee8292a78eb93_virlock_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
e32c00297f567cd6af0ee8292a78eb93_virlock_JC.exe
-
Size
189KB
-
MD5
e32c00297f567cd6af0ee8292a78eb93
-
SHA1
95a87f55f3f637b26c99d9abde017df86089a20a
-
SHA256
bd8b8a788e4735d75bc045f936f6f4ae45e6c4d6857f7fd030a76386c35e5311
-
SHA512
ff8109c07759d6cfbbf919fe309d79786d61b075f594307755e802067d50787753dd39a5f47da7e6f16458bd45b3e363245cfd6862de9bacc8cd77fc7f9a2d9a
-
SSDEEP
3072:XWLyuMUdxtamkRFU3Ti3/fKSiGyGLwMhxmMgHJVY7q1bZMN:XWaUdxtaLsMSSiGyGPfmBpVD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e32c00297f567cd6af0ee8292a78eb93_virlock_JC.exe
Files
-
e32c00297f567cd6af0ee8292a78eb93_virlock_JC.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE